Vulnerabilities > CVE-2019-12492 - Incorrect Authorization vulnerability in Gallagher Command Centre

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
LOW
Availability impact
NONE
network
high complexity
gallagher
CWE-863

Summary

Gallagher Command Centre before 7.80.939, 7.90.x before 7.90.961, and 8.x before 8.00.1128 allows arbitrary event creation and information disclosure via the FT Command Centre Service and FT Controller Service services.

Common Weakness Enumeration (CWE)